[SLUG] Re: [chat] Problems with Squid 2.5.2 under Debian Woody

[mkraus@xxxxxxxxxxxxxxxxxxxxxx]

G'day...

1052195038.292   1946 192.168.100.250 TCP_MISS/503 1502 GET http://www.mycareer.com.au/ - NONE/- text/html

The connection is refused...



Below are my firewal rules:

Please note that removing the FORWARD rules makes no difference from the firewall machine (on which squid resides). It does make a difference to the client, if I choose to connect directly rather than via the cache.

Also please note that other web addresses still do work.

=========================
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  internal/24          anywhere
ACCEPT     tcp  --  anywhere             anywhere           tcp dpt:smtp
ACCEPT     icmp --  klaxon.pacific.net.au  anywhere
ACCEPT     icmp --  nicothoe.pacific.net.au  anywhere
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere           tcp spt:www
REJECT     all  --  anywhere             anywhere           reject-with icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     tcp  --  anywhere             anywhere           tcp dpt:www reject-with icmp-port-unreachable
REJECT     all  -- !192.168.0.0/16       anywhere           reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
SNAT       all  --  internal/24         !192.168.0.0/16     to:210.23.146.46

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
=====


TIA

Mike
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
p: (02) 9955 8000

scott@xxxxxxxxxxxxxxxxxxxxxx 06/05/2003 01:29 PM

To:        mkraus@xxxxxxxxxxxxxxxxxxxxxx         cc:        slug-chat@xxxxxxxxxxx, slug@xxxxxxxxxxx         Subject:        Re: [chat] Problems with Squid 2.5.2 under Debian Woody

Whats the error?
Does www.mycareer.com.au resolve to an IP from both your machine and the 
squid server?
does looking through /var/log/squid/access.log give any clues?

Cheers,

Scott

-- 
Scott Ragen
Support Manager/IT Administrator
Roadtech Systems
www.roadtechsystems.com.au
PH: +61 2 9807 3516 FAX: +61 2 9808 5294

slug-chat-bounces@xxxxxxxxxxx wrote on 06-05-2003 09:37:58 AM:

> 
> G'day all...
> 
> I'm having troubles connecting to certain sites using Squid. (Eg.
> http://www.mycareer.com.au/ )
> 
> Any ideas?
> 
> More information happily provided upon request.
> 
> TIA
> 
> Mike
> ---
> Michael S. E. Kraus
> Administration
> Capital Holdings Group (NSW) Pty Ltd
> p: (02) 9955 8000
> 
> 
> 
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug-chat